There may be a way to do this in some versions of OpenSSL but I wanted to land without it (especially since nobody uses it anyway) first.